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DETAILED ACTION 

1 . The application has been examined. Claims 1 - 30 are pending in this office 
action. 



Response to Arguments 

2. Claims 1 - 30 are pending in this Office Action. After a further search and a 
thorough examination of the present application, claims 1 - 30 remain rejected. 

3. Applicant's arguments filed with respect to claims 1 - 30 have been fully 
considered but they are not persuasive. 

Applicant argues that there is no teaching in Saito of an access layer operable to 
control access to an electronic document nor an expert system providing authorization 
information to an access layer in response to a request. 

In response to Applicant's argument, the Examiner respectfully disagrees as 
Saito teaches the access layer operable to control access to an electronic document 
and the provision of authorization of access to information upon request in column 8 
lines 11-34. Saito clearly discloses the access right settings and access privileges that 
comprise of authorization of access of the document portions. Furthermore, Saito 
explains the set-up of right of access to a structured document in column 7 lines 34 - 
47. 

Claims 12 and 21 recite the same subject matter and for the same reasons as 
cited above the rejection is maintained. 
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Hence, Applicant's arguments do not distinguish the claimed invention over the prior art 
of record. In light of the foregoing arguments 103 rejections are sustained. 

Allowable Subject Matter 

4. Claims 7, 9, 15, 16, 18, 25, 26 and 28 are objected to as being dependent upon a 
rejected base claim, but would be allowable if rewritten in independent form including all 
of the limitations of the base claim and any intervening claims. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1 - 6, 8, 10 - 14, 17, 19 - 24, 27 and 29 - 30 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Saito et al. ('Saito' herein after) (US 
6,599,324 B2) further in view of Schneck et al. ('Schneck' herein after) US 6,314,409 
B2. 

With respect to claim 1 , 

Saito discloses a computer system for protecting electronic documents, 
comprising: 
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- a repository for storing an electronic document having a document attribute 
(Figure 2, lines 22 - 27, Saito); 

- an access layer operable to control access to the electronic document, 
wherein the access layer is used by an accessor to access at least one 
portion of the electronic document, the accessor having an accessor attribute 
(Figure 8 and column 2 lines 11 - 24, Saito); 

- a rule set (column 8 lines 3-9, Saito); and 

- an expert system, wherein the expert system provides authorization 
information to the access layer in response to a request, and wherein the 
expert system is operable to determine the authorization information 
comprising an access behavior with regards to the at least one portion, and 
wherein the expert system determines access behavior by evaluating rules of 
the rule set with reference at least to the document attribute and the accessor 
attribute when the accessor tries to access the at least one portion using the 
access layer (column 8 lines 12-34, Saito). 

Saito however does not disclose the rule set as claimed. 

Schneck teaches the rule set as claimed (column 34 lines 28 - 43, Schneck). 

It would have been obvious to one of ordinary skill in the art of data processing at 
the time of the present invention to combine the teachings of cited references because 
both the inventions deal with access rights and management of the documents. Also 
Schneck's system would provide control access not only for the document as a whole 
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but also in portions and this would be provided using the rules from the rule set (column 
7 lines 23 - 31 , Schneck). 

7. Claims 2 - 6, 8, and 10 - 1 1 are rejected under the same rationale given for 
claim 1 . The citations of the elements claimed and taught are listed below. 

With respect to claim 2, 

Schneck teaches the computer system of claim 1 , where the rule set is stored in 
a knowledge base and the access behavior is defined in the knowledge base (column 
10 lines 1-5 and column 19 lines 30 - 55, Schneck). 

With respect to claim 3, 

Saito discloses the computer system of claim 1 , where the expert system returns 
the access behavior to the access layer to control the access of the accessor (Figure 4, 
column 9 lines 19-32, Saito). 

With respect to claim 4, 

Saito discloses the computer system of claim 1 , where the rule set has a rule that 
uses the accessor attribute and the document attribute to assert a condition on the 
basis of a value of the accessor attribute and a value of the document attribute (column 
10 lines 17-29, Saito). 
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With respect to claim 5, 

Saito discloses the computer system of claim 1 , where the access layer utilizes a 
generic interface implemented by the document to access the document attribute from 
the document (column 10 lines 45 - 55, Saito). 

With respect to claim 6, 

Saito discloses the computer system of claim 5, where the expert system utilizes 
the generic interface implemented by the document to retrieve structure meta data of 
the document that describes the structure of the document (column 1 1 lines 1 5 - 30, 
Saito). 

With respect to claim 8, 

Saito discloses the computer system of claim 6, where the structure meta data 
has at least one structure element that is associated with a key that influences the 
access behavior for the at least one structure element (column 1 3 lines 4-13, Saito). 

With respect to claim 10, 

Schneck teaches the computer system of claim 1 , where at least one of: 
- the document attribute comprises at least one of document type, document 
structure information, document meta data, document relationship 
information, and document access behavior (column 7 lines 2-11, Saito); 
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- the accessor attribute comprises at least one of user role, user group, 
process type, and application type; the access behavior comprises at least 
one of hidden, protected, read, modify, delete, create, print, copy, transport, 
archive, and custom access behavior (column 25 lines 20 - 45, Schneck); 
and 

- the accessor comprises at least one of user, application, and process (column 
7 lines 35 - 45, Saito). 

With respect to claim 1 1 , 

Schneck teaches the computer system of claim 1 , where a change of the rule set 
affects substantially simultaneously the access behavior to the at least one portion 
without the need to change the document or the accessor (column 7 lines 22 - 40, 
Schneck). 

With respect to claim 12, 

Saito discloses a method for controlling access to electronic documents, 
comprising: 

- receiving a request of an accessor to access at least one portion of an 
electronic document stored in a repository (Figure 2, lines 22 - 27, Saito), 
with the electronic document having a document attribute and the accessor 
having an accessor attribute (Figure 8 and column 2 lines 1 1 - 24, Saito); 
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- requesting authorization information from an expert system with regards to 
the authorization of the accessor to the at least one portion in response to 
receiving the request (column 8 lines 3-9, Saito); 

- receiving from the expert system the authorization information including an 
access behavior with regards to the at least one portion, where the access 
behavior is determined by applying rules of a rule set to data comprising at 
least the document attribute and the accessor attribute; and granting the 
accessor access to the at least one portion according to the access behavior 
(column 8 lines 12-34, Saito). 

Saito however does not disclose the rule set as claimed. 

Schneck teaches the rule set as claimed (column 34 lines 28 - 43, Schneck). 

It would have been obvious to one of ordinary skill in the art of data processing at 
the time of the present invention to combine the teachings of cited references because 
both the inventions deal with access rights and management of the documents. Also 
Schneck's system would provide control access not only for the document as a whole 
but also in portions and this would be provided using the rules from the rule set (column 
7 lines 23 - 31 , Schneck). 

8. Claims 13-14,17, and 1 9 - 20 are rejected under the same rationale given for 
claim 12. The citations of the elements claimed and taught are listed below. 



With respect to claim 1 3, 
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Schneck teaches the method of claim 12, where the access behavior is defined 
in a knowledge base and the rule set is stored in the knowledge base (column 10 lines 1 
- 5 and column 19 lines 30 - 55, Schneck). 

With respect to claim 14, 

- Saito discloses the method of claim 12, where the rule set has a rule that 
uses the accessor attribute and the document attribute to assert a condition 
on the basis of a value of the accessor attribute and a value of the document 
attribute (column 10 lines 17-29, Saito). 

With respect to claim 1 7, 

Saito discloses the method of claim 12, further comprising: retrieving structure 
meta data of the document that describes the structure of the document (column 13 
lines 4- 13, Saito). 

With respect to claim 19, 

Schneck teaches the method of claim 12, where the access behavior comprises 
at least one of hidden, protected, read, modify, delete, create, print, copy, transport, 
archive, and custom access behavior (column 25 lines 20 - 45, Schneck). 



With respect to claim 20, 
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Schneck teaches the method of claim 12, further comprising: changing the rule 
set and affecting substantially simultaneously the access behavior to the at least one 
portion without the need to change the document or the accessor (column 7 lines 22 - 
40, Schneck). 

With respect to claim 21 , 

Saito discloses a computer program product, tangibly embodied on a machine 
readable medium, comprising instructions operable to cause a data processing 
apparatus to: 

- receive a request from an accessor to access at least one portion of an 
electronic document stored in a repository (Figure 2, lines 22 - 27, Saito), 
with the electronic document having a document attribute and the accessor 
having an accessor attribute (Figure 8 and column 2 lines 11-24, Saito); 

- request authorization information from an expert system with regards to the 
authorization of the accessor to the at least one portion in response to 
receiving the request (column 8 lines 3-9, Saito); 

- receive from the expert system the authorization information including an 
access behavior with regards to the at least one portion, where the access 
behavior is determined by applying rules of a rule set to data comprising at 
least the document attribute and the accessor attribute; and grant the 
accessor access to the at least one portion according to the access behavior 
(column 8 lines 12-34, Saito). 



Application/Control Number: 10/722,373 Page 1 1 

Art Unit: 2166 

Saito however does not disclose the rule set as claimed. 

Schneck teaches the rule set as claimed (column 34 lines 28 - 43, Schneck). 

It would have been obvious to one of ordinary skill in the art of data processing at 
the time of the present invention to combine the teachings of cited references because 
both the inventions deal with access rights and management of the documents. Also 
Schneck's system would provide control access not only for the document as a whole 
but also in portions and this would be provided using the rules from the rule set (column 
7 lines 23 - 31 , Schneck). 

9. Claims 22 - 24, 27, 29 - 30 are rejected under the same rationale given for claim 
21. The citations of the elements claimed and taught are listed below. 

With respect to claim 22, 

Schneck teaches the product of claim 21 , where access to the at least one 
portion of the electronic document is provided only through an access layer comprising 
the instructions to receive a request, request authorization, receive from the expert 
system authorization information, and grant the accessor access (column 7 lines 20 - 
35, Schneck). 

With respect to claim 23, 

Schneck teaches the product of claim 21 , where the access behavior is defined 
in a knowledge base and the rule set is stored in the knowledge base (column 10 lines 1 
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- 5 and column 19 lines 30 - 55, Schneck). 

With respect to claim 24, 

- Saito discloses the product of claim 21 , where the rule set has a rule that 
uses the accessor attribute and the document attribute to assert a condition 
on the basis of a value of the accessor attribute and a value of the document 
attribute (column 10 lines 1 7 - 29, Saito). 

With respect to claim 27, 

Saito discloses the product of claim 21 , wherein the instructions are further 
operable to: retrieve structure meta data of the document that describes the structure of 
the document (column 13 lines 4-13, Saito). 

With respect to claim 29, 

Schneck teaches the product of claim 21 , where the access behavior comprises 
at least one of hidden, protected, read, modify, delete, create, print, copy, transport, 
archive, and custom access behavior (column 25 lines 20 - 45, Schneck). 

With respect to claim 30, 

Schneck teaches the product of claim 21 , wherein the instructions are further 
operable to: change the rule set and affecting substantially simultaneously the access 
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behavior to the at least one portion without the need to change the document or the 
accessor (column 7 lines 22 - 40, Schneck). 
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